Privacy Policy

1. Data We Collect

When you register and use OnlyWin Casino, we collect:

• → Personal identification: full name, date of birth, email address
• → Contact information: address, province, postal code
• → KYC documents: government ID, proof of address
• → Financial data: deposit/withdrawal history (not payment card numbers)
• → Technical data: IP address, device type, browser, session logs
• → Gaming activity: bet history, game sessions, bonus usage

We do not store payment card numbers on our servers. Card transactions are processed through PCI-DSS compliant payment gateways that handle all card data independently.

2. How We Use Your Data

We use collected data for:

• → Account registration, verification, and management
• → Processing deposits and withdrawals
• → Compliance with KYC and anti-money laundering regulations
• → Responsible gaming monitoring and limit enforcement
• → Customer support and dispute resolution
• → Fraud detection and security
• → Marketing communications (where you have opted in)

3. Data Sharing

We do not sell your personal data to third parties. We share data only with: payment processors (to execute transactions), KYC verification providers (to validate identity documents), regulatory authorities (when required by law or licence conditions), and cloud infrastructure providers (under data processing agreements). All third-party providers who access personal data are contractually bound to data protection standards.

4. Data Security

All data transmission between your browser and our servers uses 256-bit SSL encryption. Passwords are stored using bcrypt hashing — never in plain text. Session tokens are rotated on every login. We conduct regular security audits as part of our Kahnawake Gaming Commission licence requirements. In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovering the breach.

5. Cookies

We use cookies to maintain session authentication, remember your preferences, and analyze site performance. Cookie categories:

• • Essential: Login session, security tokens — cannot be disabled
• • Functional: Language preference, game lobby settings
• • Analytics: Aggregate traffic analysis (anonymized)

You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent login functionality.

6. Data Retention

We retain your personal data for as long as your account is active plus a mandatory retention period required by our gambling licence and applicable anti-money laundering law (typically 5 years after account closure). After the retention period, personal data is securely deleted. KYC documents are retained for the full required period and then destroyed.

7. Your Rights

Under PIPEDA (Personal Information Protection and Electronic Documents Act) and applicable Canadian privacy law, you have the right to:

• → Access the personal data we hold about you
• → Correct inaccurate data
• → Request deletion of your data (subject to legal retention requirements)
• → Withdraw consent for marketing communications at any time
• → Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact our support team via live chat or email.

8. Contact

For privacy-related enquiries, contact our support team via the live chat feature available on all pages of OnlyWin Casino. We respond to data requests within 30 days. For formal complaints, the Office of the Privacy Commissioner of Canada can be reached at priv.gc.ca.